This vulnerability (CVE-2026-32996) in Veeam Backup and Replication version 13 involves the insertion of sensitive information into log files (CWE-532), which can be leveraged for local privilege escalation on Windows systems running the Veeam Agent. The CVSS 4.0 base score is 7.3, indicating high severity, with attack vector local, low attack complexity, and partial privileges required. No official patch or remediation guidance has been published by Veeam as of the data provided.

An attacker with local access and some privileges on a system running Veeam Backup and Replication 13 could exploit this vulnerability to escalate their privileges by leveraging sensitive information exposed in log files. This could lead to unauthorized actions at a higher privilege level, potentially compromising system integrity. No known exploits in the wild have been reported.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until an official fix is available, restrict local access to trusted users only and monitor for any suspicious activity related to Veeam Backup and Replication logs. Avoid exposing log files containing sensitive information to unprivileged users.